VPC

Caligo provides the following security rules for AWS VPC:

  • Security groups should not allow ingress to 0.0.0.0/0 on ports 22 and 3389

  • Default security groups should block all inbound and outbound traffic

  • Flow logs for VPC should be enabled and active

  • The number of security groups within a region should be be minimized for easier management

  • EC2 Classic should not be used and should be replaced by VPC

  • Non-default security groups that are unused should be removed

Last updated